apply_patch still requires approval in workspace-write + untrusted (Ubuntu 24.04, v0.120.0)

What version of Codex CLI is running?

0.120.0

What subscription do you have?

Plus

Which model were you using?

gpt-5.4

What platform is your computer?

Linux 6.8.0-106-generic x86_64 x86_64

What terminal emulator and version are you using (if applicable)?

putty

What issue are you seeing?

Codex is asking for permissions to create a file to repo, even though it should not.

› Forget AGENTS.md. Just try to write dummy.txt with content "Just testing" using apply_patch.

• I’ll make the requested single-file test edit with apply_patch.

• Added dummy.txt (+1 -0)
1 +Just testing

Would you like to make the following edits?

**› 1. Yes, proceed (y)

1. Yes, and don't ask again for these files (a)
2. No, and tell Codex what to do differently (esc)**

What steps can reproduce the bug?

Ubuntu 24.04.4 LTS
Codex v0.120.0
/status shows Custom (workspace-write, untrusted)
codex sandbox linux -- /bin/true succeeds

ask Codex to create dummy.txt via apply_patch
result: patch preview appears and Codex still asks “Would you like to make the following edits?”

What is the expected behavior?

Codex would be able to write the file without asking for permissions.

Additional information

_No response_